Security advisories

medium2022-09-22

CVE-2022-41235-Jenkins WildFly Deployer Plugin vulnerable to path traversal

View chart →

jenkinsci/wildfly-deployer-plugin · GHSA-f7fq-wp2x-jc25

medium2022-09-22

CVE-2022-37246-Craft CMS Cross-site Scripting vulnerability

View chart →

craftcms/cms · GHSA-f546-v666-559x

high2022-09-22

CVE-2022-41225-Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting

View chart →

jenkinsci/anchore-container-scanner-plugin · GHSA-f2j5-w76m-3rqh

medium2022-09-22

CVE-2022-41238-Lack of authentication mechanism in Jenkins DotCi Plugin webhook

View chart →

jenkinsci/dotci · GHSA-9mc6-vgmq-x6xf

medium2022-09-22

CVE-2022-41236-CSRF vulnerability in Jenkins Security Inspector plugin

View chart →

jenkinsci/security-inspector-plugin · GHSA-933x-5g7r-773q

high2022-09-22

CVE-2022-41240-Stored XSS vulnerability in Jenkins Walti plugin

View chart →

jenkinsci/walti-plugin · GHSA-7qpm-vmwv-hq7h

medium2022-09-22

CVE-2022-41243-Jenkins SmallTest Plugin missing hostname validation

View chart →

jenkinsci/smalltest-plugin · GHSA-7jwg-hq85-c6m6

medium2022-09-22

CVE-2022-41233-Jenkins Rundeck Plugin Missing Authorization vulnerability

View chart →

jenkinsci/rundeck-plugin · GHSA-4jfq-4fqc-5j9c

medium2022-09-22

CVE-2022-41250-Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentials

View chart →

jenkinsci/scm-httpclient-plugin · GHSA-q9j5-2mjx-8x28

medium2022-09-22

CVE-2022-41252-Missing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDs

View chart →

jenkinsci/cons3rt-plugin · GHSA-p37p-wg92-2fc4

low2022-09-22

CVE-2022-41255-API token stored in plain text by Jenkins CONS3RT Plugin

View chart →

jenkinsci/cons3rt-plugin · GHSA-fmq9-r4p2-8272

low2022-09-22

CVE-2022-41248-Jenkins BigPanda Notifier Plugin Missing Password Field Masking

View chart →

jenkinsci/bigpanda-plugin · GHSA-cpm5-cqr9-7p79

medium2022-09-22

CVE-2022-41254-Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials

View chart →

jenkinsci/cons3rt-plugin · GHSA-74x9-fhc2-p79f

medium2022-09-22

CVE-2022-41249-Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery

View chart →

jenkinsci/scm-httpclient-plugin · GHSA-6cvr-rvpm-9wx4

medium2022-09-22

CVE-2022-41251-Jenkins Apprenda Plugin has Missing Authorization vulnerability

View chart →

jenkinsci/apprenda-plugin · GHSA-52v4-wxrx-gjjm

medium2022-09-22

CVE-2022-41253-CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials

View chart →

jenkinsci/cons3rt-plugin · GHSA-48q3-5297-wmmx

medium2022-09-22

CVE-2022-3250-rdiffweb has insecure HTTP cookies

View chart →

ikus060/rdiffweb · GHSA-m748-hjqg-rpp8

low2022-09-22

CVE-2022-31679-Spring Data REST can expose hidden entity attributes

View chart →

spring-projects/spring-data-rest · GHSA-fv7x-v67w-cvqv

medium2022-09-22

CVE-2022-38073-Awesome Support vulnerable to persistent cross-site scripting

View chart →

awesome-support/awesome-support · GHSA-qrqm-574x-q7f2

medium2022-09-22

CVE-2022-3233-rdiffweb CSRF could lead to disabling notifications in user profile

View chart →

ikus060/rdiffweb · GHSA-9vxf-mcm6-5m42